© 2026 vulntracker.io

CVE-2011-1011

N/A

Published: February 24, 2011 at 08:00 PM UTC

Updated: June 16, 2026 at 11:28 PM UTC

3 products affected across 1 vendorEnterprise LinuxFedoraPolicycoreutils

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 0.4%

Description

The seunshare_mount function in sandbox/seunshare.c in seunshare in certain Red Hat packages of policycoreutils 2.0.83 and earlier in Red Hat Enterprise Linux (RHEL) 6 and earlier, and Fedora 14 and earlier, mounts a new directory on top of /tmp without assigning root ownership and the sticky bit to this new directory, which allows local users to replace or delete arbitrary /tmp files, and consequently cause a denial of service or possibly gain privileges, by running a setuid application that relies on /tmp, as demonstrated by the ksu application.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Enterprise Linux · Red Hatrpm

95%

Fedora · Red Hat

95%

10 12 13 14 6 7 8 9

Policycoreutils · Red Hat

95%

v ≤ 2.0.831.0 1.1 1.10 1.12 1.14 1.16 1.18 1.2 1.20 1.21.1 1.21.10 1.21.11 1.21.12 1.21.13 1.21.14 1.21.15 1.21.16 1.21.17 1.21.18 1.21.19 1.21.2 1.21.20 1.21.21 1.21.22 1.21.3 1.21.4 1.21.5 1.21.6 1.21.7 1.21.8 1.21.9 1.22 1.23.1 1.23.10 1.23.11 1.23.2 1.23.3 1.23.4 1.23.5 1.23.6 1.23.7 1.23.8 1.23.9 1.24 1.25.1 1.25.2 1.25.3 1.25.4 1.25.5 1.25.6 1.25.7 1.25.8 1.25.9 1.26 1.27.1 1.27.10 1.27.11 1.27.12 1.27.13 1.27.14 1.27.15 1.27.16 1.27.17 1.27.18 1.27.19 1.27.2 1.27.20 1.27.21 1.27.22 1.27.23 1.27.24 1.27.25 1.27.26 1.27.27 1.27.28 1.27.29 1.27.3 1.27.30 1.27.31 1.27.32 1.27.33 1.27.34 1.27.35 1.27.36 1.27.37 1.27.4 1.27.5 1.27.6 1.27.7 1.27.8 1.27.9 1.28 1.29.1 1.29.10 1.29.11 1.29.12 1.29.13 1.29.14 1.29.15 1.29.16 1.29.17 1.29.18 1.29.19 1.29.2 1.29.20 1.29.21 1.29.22 1.29.23 1.29.24 1.29.25 1.29.26 1.29.27 1.29.28 1.29.3 1.29.4 1.29.5 1.29.6 1.29.7 1.29.8 1.29.9 1.30 1.30.1 1.30.10 1.30.11 1.30.12 1.30.13 1.30.14 1.30.15 1.30.16 1.30.17 1.30.18 1.30.19 1.30.2 1.30.20 1.30.21 1.30.22 1.30.23 1.30.24 1.30.25 1.30.26 1.30.27 1.30.28 1.30.29 1.30.3 1.30.30 1.30.31 1.30.4 1.30.5 1.30.6 1.30.7 1.30.8 1.30.9 1.32 1.33.1 1.33.10 1.33.11 1.33.12 1.33.13 1.33.14 1.33.15 1.33.16 1.33.2 1.33.3 1.33.4 1.33.5 1.33.6 1.33.7 1.33.8 1.33.9 1.34.0 1.34.1 1.4 1.6 1.8 2.0.0 2.0.1 2.0.10 2.0.11 2.0.12 2.0.13 2.0.14 2.0.15 2.0.16 2.0.17 2.0.18 2.0.19 2.0.2 2.0.20 2.0.21 2.0.22 2.0.23 2.0.24 2.0.25 2.0.26 2.0.27 2.0.28 2.0.29 2.0.3 2.0.30 2.0.31 2.0.32 2.0.33 2.0.34 2.0.35 2.0.36 2.0.37 2.0.38 2.0.39 2.0.4 2.0.40 2.0.41 2.0.42 2.0.43 2.0.44 2.0.45 2.0.46 2.0.47 2.0.48 2.0.49 2.0.5 2.0.50 2.0.51 2.0.52 2.0.53 2.0.54 2.0.55 2.0.56 2.0.57 2.0.58 2.0.59 2.0.6 2.0.60 2.0.61 2.0.62 2.0.63 2.0.64 2.0.65 2.0.66 2.0.67 2.0.68 2.0.69 2.0.7 2.0.70 2.0.71 2.0.72 2.0.73 2.0.74 2.0.75 2.0.76 2.0.77 2.0.78 2.0.79 2.0.8 2.0.80 2.0.81 2.0.82 2.0.9

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (15)

Mailing Listx_refsource_FULLDISC

Source: [email protected]

http://archives.neohapsis.com/archives/fulldisclosure/2011-02/0585.html

Vendor Advisoryx_refsource_FEDORA

Source: [email protected]

http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056227.html

Mailing Listx_refsource_MLIST

Source: [email protected]

http://openwall.com/lists/oss-security/2011/02/23/1

Mailing Listx_refsource_MLIST

Source: [email protected]

http://openwall.com/lists/oss-security/2011/02/23/2

x_refsource_CONFIRM

Source: [email protected]

http://pkgs.fedoraproject.org/gitweb/?p=policycoreutils.git%3Ba=blob%3Bf=policycoreutils-rhat.patch%3Bh=d4db5bc06027de23d12a4b3f18fa6f9b1517df27%3Bhb=HEAD#l2197

Third Party Advisoryx_refsource_SECUNIAVendor Advisory

Source: [email protected]

http://secunia.com/advisories/43415

Third Party Advisoryx_refsource_SECUNIA

Source: [email protected]

http://secunia.com/advisories/43844

Third Party Advisoryx_refsource_SECUNIA

Source: [email protected]

http://secunia.com/advisories/44034

CVSS

6.9MEDIUM[email protected]

Confidentiality: COMPLETE
Integrity: COMPLETE
Availability: COMPLETE

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-264

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card